Vulnerabilities > Mintplexlabs > Anythingllm Desktop > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-06-06 CVE-2024-3166 Cross-site Scripting vulnerability in Mintplexlabs Anythingllm Desktop and Anythingllm Webapp
A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application.
network
low complexity
mintplexlabs CWE-79
critical
9.6